Notice

This document is for a development version of Ceph.

Squid

Squid is the 19th stable release of Ceph.

v19.2.2 Squid

This is the second hotfix release in the Squid series. We recommend that all users update to this release.

Notable Changes

  • This hotfix release resolves an RGW data loss bug when CopyObject is used to copy an object onto itself. S3 clients typically do this when they want to change the metadata of an existing object. Due to a regression caused by an earlier fix for https://tracker.ceph.com/issues/66286, any tail objects associated with such objects are erroneously marked for garbage collection. RGW deployments on Squid are encouraged to upgrade as soon as possible to minimize the damage. The experimental rgw-gap-list tool can help to identify damaged objects.

Changelog

  • squid: rgw: keep the tails when copying object to itself (pr#62711, cbodley)

v19.2.1 Squid

This is the first backport release in the Squid series.

Notable Changes

  • CephFS: The command fs subvolume create now allows tagging subvolumes by supplying the option --earmark with a unique identifier needed for NFS or SMB services. The earmark string for a subvolume is empty by default. To remove an already present earmark, an empty string can be assigned to it. Additionally, the commands ceph fs subvolume earmark set, ceph fs subvolume earmark get, and ceph fs subvolume earmark rm have been added to set, get and remove earmark from a given subvolume.

  • CephFS: Expanded removexattr support for CephFS virtual extended attributes. Previously one had to use setxattr to restore the default in order to “remove”. You may now properly use removexattr to remove. You can also now remove layout on the root inode, which then will restore the layout to the default.

  • RADOS: A performance bottleneck in the balancer mgr module has been fixed.

    Related Tracker: https://tracker.ceph.com/issues/68657

  • RADOS: Based on tests performed at scale on an HDD-based Ceph cluster, it was found that scheduling with mClock was not optimal with multiple OSD shards. For example, in the test cluster with multiple OSD node failures, the client throughput was found to be inconsistent across test runs coupled with multiple reported slow requests. However, the same test with a single OSD shard and with multiple worker threads yielded significantly better results in terms of consistency of client and recovery throughput across multiple test runs. Therefore, as an interim measure until the issue with multiple OSD shards (or multiple mClock queues per OSD) is investigated and fixed, the following change to the default HDD OSD shard configuration is made:

    • osd_op_num_shards_hdd = 1 (was 5)

    • osd_op_num_threads_per_shard_hdd = 5 (was 1)

    For more details, see https://tracker.ceph.com/issues/66289.

  • mgr/REST: The REST manager module will trim requests based on the ‘max_requests’ option. Without this feature, and in the absence of manual deletion of old requests, the accumulation of requests in the array can lead to Out Of Memory (OOM) issues, resulting in the Manager crashing.

Changelog

  • doc/rgw/notification: add missing admin commands (pr#60609, Yuval Lifshitz)

  • squid: [RGW] Fix the handling of HEAD requests that do not comply with RFC standards (pr#59123, liubingrun)

  • squid: a series of optimizations for kerneldevice discard (pr#59065, Adam Kupczyk, Joshua Baergen, Gabriel BenHanokh, Matt Vandermeulen)

  • squid: Add Containerfile and build.sh to build it (pr#60229, Dan Mick)

  • squid: AsyncMessenger: Don’t decrease l_msgr_active_connections if it is negative (pr#60447, Mohit Agrawal)

  • squid: blk/aio: fix long batch (64+K entries) submission (pr#58676, Yingxin Cheng, Igor Fedotov, Adam Kupczyk, Robin Geuze)

  • squid: blk/KernelDevice: using join() to wait thread end is more safe (pr#60616, Yite Gu)

  • squid: bluestore/bluestore_types: avoid heap-buffer-overflow in another way to keep code uniformity (pr#58816, Rongqi Sun)

  • squid: ceph-bluestore-tool: Fixes for multilple bdev label (pr#59967, Adam Kupczyk, Igor Fedotov)

  • squid: ceph-volume: add call to ceph-bluestore-tool zap-device (pr#59968, Guillaume Abrioux)

  • squid: ceph-volume: add new class UdevData (pr#60091, Guillaume Abrioux)

  • squid: ceph-volume: add TPM2 token enrollment support for encrypted OSDs (pr#59196, Guillaume Abrioux)

  • squid: ceph-volume: do not convert LVs’s symlink to real path (pr#58954, Guillaume Abrioux)

  • squid: ceph-volume: do source devices zapping if they’re detached (pr#58964, Guillaume Abrioux, Igor Fedotov)

  • squid: ceph-volume: drop unnecessary call to get_single_lv() (pr#60353, Guillaume Abrioux)

  • squid: ceph-volume: fix dmcrypt activation regression (pr#60734, Guillaume Abrioux)

  • squid: ceph-volume: fix generic activation with raw osds (pr#59598, Guillaume Abrioux)

  • squid: ceph-volume: fix OSD lvm/tpm2 activation (pr#59953, Guillaume Abrioux)

  • squid: ceph-volume: pass self.osd_id to create_id() call (pr#59622, Guillaume Abrioux)

  • squid: ceph-volume: switch over to new disk sorting behavior (pr#59623, Guillaume Abrioux)

  • squid: ceph.spec.in: we need jsonnet for all distroes for make check (pr#60075, Kyr Shatskyy)

  • squid: cephadm/services/ingress: fixed keepalived config bug (pr#58381, Bernard Landon)

  • Squid: cephadm: bootstrap should not have “This is a development version of cephadm” message (pr#60880, Shweta Bhosale)

  • squid: cephadm: emit warning if daemon’s image is not to be used (pr#59929, Matthew Vernon)

  • squid: cephadm: fix apparmor profiles with spaces in the names (pr#58542, John Mulligan)

  • squid: cephadm: pull container images from quay.io (pr#60354, Guillaume Abrioux)

  • squid: cephadm: Support Docker Live Restore (pr#59933, Michal Nasiadka)

  • squid: cephadm: update default image and latest stable release (pr#59827, Adam King)

  • squid: cephfs,mon: fix bugs related to updating MDS caps (pr#59672, Rishabh Dave)

  • squid: cephfs-shell: excute cmd ‘rmdir_helper’ reported error (pr#58810, teng jie)

  • squid: cephfs: Fixed a bug in the readdir_cache_cb function that may have us… (pr#58804, Tod Chen)

  • squid: cephfs_mirror: provide metrics for last successful snapshot sync (pr#59070, Jos Collin)

  • squid: cephfs_mirror: update peer status for invalid metadata in remote snapshot (pr#59406, Jos Collin)

  • squid: cephfs_mirror: use snapdiff api for incremental syncing (pr#58984, Jos Collin)

  • squid: client: calls to _ll_fh_exists() should hold client_lock (pr#59487, Venky Shankar)

  • squid: client: check mds down status before getting mds_gid_t from mdsmap (pr#58587, Yite Gu, Dhairya Parmar)

  • squid: cls/user: reset stats only returns marker when truncated (pr#60164, Casey Bodley)

  • squid: cmake: use ExternalProjects to build isa-l and isa-l_crypto libraries (pr#60107, Casey Bodley)

  • squid: common,osd: Use last valid OSD IOPS value if measured IOPS is unrealistic (pr#60660, Sridhar Seshasayee)

  • squid: common/dout: fix FTBFS on GCC 14 (pr#59055, Radoslaw Zarzynski)

  • squid: common/options: Change HDD OSD shard configuration defaults for mClock (pr#59973, Sridhar Seshasayee)

  • squid: corpus: update submodule with mark cls_rgw_reshard_entry forward_inco… (pr#58923, NitzanMordhai)

  • squid: crimson/os/seastore/cached_extent: add the “refresh” ability to lba mappings (pr#58957, Xuehan Xu)

  • squid: crimson/os/seastore/lba_manager: do batch mapping allocs when remapping multiple mappings (pr#58820, Xuehan Xu)

  • squid: crimson/os/seastore/onode: add hobject_t into Onode (pr#58830, Xuehan Xu)

  • squid: crimson/os/seastore/transaction_manager: consider inconsistency between backrefs and lbas acceptable when cleaning segments (pr#58837, Xuehan Xu)

  • squid: crimson/os/seastore: add checksum offload to RBM (pr#59298, Myoungwon Oh)

  • squid: crimson/os/seastore: add writer level stats to RBM (pr#58828, Myoungwon Oh)

  • squid: crimson/os/seastore: track transactions/conflicts/outstanding periodically (pr#58835, Yingxin Cheng)

  • squid: crimson/osd/pg_recovery: push the iteration forward after finding unfound objects when starting primary recoveries (pr#58958, Xuehan Xu)

  • squid: crimson: access coll_map under alien tp with a lock (pr#58841, Samuel Just)

  • squid: crimson: audit and correct epoch captured by IOInterruptCondition (pr#58839, Samuel Just)

  • squid: crimson: simplify obc loading by locking excl for load and demoting to needed lock (pr#58905, Matan Breizman, Samuel Just)

  • squid: debian pkg: record python3-packaging dependency for ceph-volume (pr#59202, Kefu Chai, Thomas Lamprecht)

  • squid: doc,mailmap: update my email / association to ibm (pr#60338, Patrick Donnelly)

  • squid: doc/ceph-volume: add spillover fix procedure (pr#59540, Zac Dover)

  • squid: doc/cephadm: add malformed-JSON removal instructions (pr#59663, Zac Dover)

  • squid: doc/cephadm: Clarify “Deploying a new Cluster” (pr#60809, Zac Dover)

  • squid: doc/cephadm: clean “Adv. OSD Service Specs” (pr#60679, Zac Dover)

  • squid: doc/cephadm: correct “ceph orch apply” command (pr#60432, Zac Dover)

  • squid: doc/cephadm: how to get exact size_spec from device (pr#59430, Zac Dover)

  • squid: doc/cephadm: link to “host pattern” matching sect (pr#60644, Zac Dover)

  • squid: doc/cephadm: Update operations.rst (pr#60637, rhkelson)

  • squid: doc/cephfs: add cache pressure information (pr#59148, Zac Dover)

  • squid: doc/cephfs: add doc for disabling mgr/volumes plugin (pr#60496, Rishabh Dave)

  • squid: doc/cephfs: edit “Disabling Volumes Plugin” (pr#60467, Zac Dover)

  • squid: doc/cephfs: edit “Layout Fields” text (pr#59021, Zac Dover)

  • squid: doc/cephfs: edit 3rd 3rd of mount-using-kernel-driver (pr#61080, Zac Dover)

  • squid: doc/cephfs: improve “layout fields” text (pr#59250, Zac Dover)

  • squid: doc/cephfs: improve cache-configuration.rst (pr#59214, Zac Dover)

  • squid: doc/cephfs: rearrange subvolume group information (pr#60435, Indira Sawant)

  • squid: doc/cephfs: s/mountpoint/mount point/ (pr#59294, Zac Dover)

  • squid: doc/cephfs: s/mountpoint/mount point/ (pr#59289, Zac Dover)

  • squid: doc/cephfs: use ‘p’ flag to set layouts or quotas (pr#60482, TruongSinh Tran-Nguyen)

  • squid: doc/dev/peering: Change acting set num (pr#59062, qn2060)

  • squid: doc/dev/release-checklist: check telemetry validation (pr#59813, Yaarit Hatuka)

  • squid: doc/dev/release-checklists.rst: enable rtd for squid (pr#59812, Neha Ojha)

  • squid: doc/dev/release-process.rst: New container build/release process (pr#60971, Dan Mick)

  • squid: doc/dev: add “activate latest release” RTD step (pr#59654, Zac Dover)

  • squid: doc/dev: instruct devs to backport (pr#61063, Zac Dover)

  • squid: doc/dev: remove “Stable Releases and Backports” (pr#60272, Zac Dover)

  • squid: doc/glossary.rst: add “Dashboard Plugin” (pr#60896, Zac Dover)

  • squid: doc/glossary: add “ceph-ansible” (pr#59007, Zac Dover)

  • squid: doc/glossary: add “flapping OSD” (pr#60864, Zac Dover)

  • squid: doc/glossary: add “object storage” (pr#59424, Zac Dover)

  • squid: doc/glossary: add “PLP” to glossary (pr#60503, Zac Dover)

  • squid: doc/governance: add exec council responsibilites (pr#60139, Zac Dover)

  • squid: doc/governance: add Zac Dover’s updated email (pr#60134, Zac Dover)

  • squid: doc/install: Keep the name field of the created user consistent with … (pr#59756, hejindong)

  • squid: doc/man: edit ceph-bluestore-tool.rst (pr#59682, Zac Dover)

  • squid: doc/mds: improve wording (pr#59585, Piotr Parczewski)

  • squid: doc/mgr/dashboard: fix TLS typo (pr#59031, Mindy Preston)

  • squid: doc/rados/operations: Improve health-checks.rst (pr#59582, Anthony D’Atri)

  • squid: doc/rados/troubleshooting: Improve log-and-debug.rst (pr#60824, Anthony D’Atri)

  • squid: doc/rados: add “pgs not deep scrubbed in time” info (pr#59733, Zac Dover)

  • squid: doc/rados: add blaum_roth coding guidance (pr#60537, Zac Dover)

  • squid: doc/rados: add confval directives to health-checks (pr#59871, Zac Dover)

  • squid: doc/rados: add link to messenger v2 info in mon-lookup-dns.rst (pr#59794, Zac Dover)

  • squid: doc/rados: add osd_deep_scrub_interval setting operation (pr#59802, Zac Dover)

  • squid: doc/rados: correct “full ratio” note (pr#60737, Zac Dover)

  • squid: doc/rados: document unfound object cache-tiering scenario (pr#59380, Zac Dover)

  • squid: doc/rados: edit “Placement Groups Never Get Clean” (pr#60046, Zac Dover)

  • squid: doc/rados: fix sentences in health-checks (2 of x) (pr#60931, Zac Dover)

  • squid: doc/rados: fix sentences in health-checks (3 of x) (pr#60949, Zac Dover)

  • squid: doc/rados: make sentences agree in health-checks.rst (pr#60920, Zac Dover)

  • squid: doc/rados: standardize markup of “clean” (pr#60500, Zac Dover)

  • squid: doc/radosgw/multisite: fix Configuring Secondary Zones -> Updating the Period (pr#60332, Casey Bodley)

  • squid: doc/radosgw/qat-accel: Update and Add QATlib information (pr#58874, Feng, Hualong)

  • squid: doc/radosgw: Improve archive-sync-module.rst (pr#60852, Anthony D’Atri)

  • squid: doc/radosgw: Improve archive-sync-module.rst more (pr#60867, Anthony D’Atri)

  • squid: doc/radosgw: Improve config-ref.rst (pr#59578, Anthony D’Atri)

  • squid: doc/radosgw: improve qat-accel.rst (pr#59179, Anthony D’Atri)

  • squid: doc/radosgw: s/Poliicy/Policy/ (pr#60707, Zac Dover)

  • squid: doc/radosgw: update rgw_dns_name doc (pr#60885, Zac Dover)

  • squid: doc/rbd: add namespace information for mirror commands (pr#60269, N Balachandran)

  • squid: doc/README.md - add ordered list (pr#59798, Zac Dover)

  • squid: doc/README.md: create selectable commands (pr#59834, Zac Dover)

  • squid: doc/README.md: edit “Build Prerequisites” (pr#59637, Zac Dover)

  • squid: doc/README.md: improve formatting (pr#59785, Zac Dover)

  • squid: doc/README.md: improve formatting (pr#59700, Zac Dover)

  • squid: doc/rgw/account: Handling notification topics when migrating an existing user into an account (pr#59491, Oguzhan Ozmen)

  • squid: doc/rgw/d3n: pass cache dir volume to extra_container_args (pr#59767, Mark Kogan)

  • squid: doc/rgw/notification: clarified the notification_v2 behavior upon upg… (pr#60662, Yuval Lifshitz)

  • squid: doc/rgw/notification: persistent notification queue full behavior (pr#59233, Yuval Lifshitz)

  • squid: doc/start: add supported Squid distros (pr#60557, Zac Dover)

  • squid: doc/start: add vstart install guide (pr#60461, Zac Dover)

  • squid: doc/start: fix “are are” typo (pr#60708, Zac Dover)

  • squid: doc/start: separate package chart from container chart (pr#60698, Zac Dover)

  • squid: doc/start: update os-recommendations.rst (pr#60766, Zac Dover)

  • squid: doc: Correct link to Prometheus docs (pr#59559, Matthew Vernon)

  • squid: doc: Document the Windows CI job (pr#60033, Lucian Petrut)

  • squid: doc: Document which options are disabled by mClock (pr#60671, Niklas Hambüchen)

  • squid: doc: documenting the feature that scrub clear the entries from damage… (pr#59078, Neeraj Pratap Singh)

  • squid: doc: explain the consequence of enabling mirroring through monitor co… (pr#60525, Jos Collin)

  • squid: doc: fix email (pr#60233, Ernesto Puerta)

  • squid: doc: fix typo (pr#59991, N Balachandran)

  • squid: doc: Harmonize ‘mountpoint’ (pr#59291, Anthony D’Atri)

  • squid: doc: s/Whereas,/Although/ (pr#60593, Zac Dover)

  • squid: doc: SubmittingPatches-backports - remove backports team (pr#60297, Zac Dover)

  • squid: doc: Update “Getting Started” to link to start not install (pr#59907, Matthew Vernon)

  • squid: doc: update Key Idea in cephfs-mirroring.rst (pr#60343, Jos Collin)

  • squid: doc: update nfs doc for Kerberos setup of ganesha in Ceph (pr#59939, Avan Thakkar)

  • squid: doc: update tests-integration-testing-teuthology-workflow.rst (pr#59548, Vallari Agrawal)

  • squid: doc:update e-mail addresses governance (pr#60084, Tobias Fischer)

  • squid: docs/rados/operations/stretch-mode: warn device class is not supported (pr#59099, Kamoltat Sirivadhna)

  • squid: global: Call getnam_r with a 64KiB buffer on the heap (pr#60127, Adam Emerson)

  • squid: librados: use CEPH_OSD_FLAG_FULL_FORCE for IoCtxImpl::remove (pr#59284, Chen Yuanrun)

  • squid: librbd/crypto/LoadRequest: clone format for migration source image (pr#60171, Ilya Dryomov)

  • squid: librbd/crypto: fix issue when live-migrating from encrypted export (pr#59145, Ilya Dryomov)

  • squid: librbd/migration/HttpClient: avoid reusing ssl_stream after shut down (pr#61095, Ilya Dryomov)

  • squid: librbd/migration: prune snapshot extents in RawFormat::list_snaps() (pr#59661, Ilya Dryomov)

  • squid: librbd: avoid data corruption on flatten when object map is inconsistent (pr#61168, Ilya Dryomov)

  • squid: log: save/fetch thread name infra (pr#60279, Milind Changire)

  • squid: Make mon addrs consistent with mon info (pr#60751, shenjiatong)

  • squid: mds/QuiesceDbManager: get requested state of members before iterating… (pr#58912, junxiang Mu)

  • squid: mds: CInode::item_caps used in two different lists (pr#56887, Dhairya Parmar)

  • squid: mds: encode quiesce payload on demand (pr#59517, Patrick Donnelly)

  • squid: mds: find a new head for the batch ops when the head is dead (pr#57494, Xiubo Li)

  • squid: mds: fix session/client evict command (pr#58727, Neeraj Pratap Singh)

  • squid: mds: only authpin on wrlock when not a locallock (pr#59097, Patrick Donnelly)

  • squid: mgr/balancer: optimize ‘balancer status detail’ (pr#60718, Laura Flores)

  • squid: mgr/cephadm/services/ingress Fix HAProxy to listen on IPv4 and IPv6 (pr#58515, Bernard Landon)

  • squid: mgr/cephadm: add “original_weight” parameter to OSD class (pr#59410, Adam King)

  • squid: mgr/cephadm: add --no-exception-when-missing flag to cert-store cert/key get (pr#59935, Adam King)

  • squid: mgr/cephadm: add command to expose systemd units of all daemons (pr#59931, Adam King)

  • squid: mgr/cephadm: bump monitoring stacks version (pr#58711, Nizamudeen A)

  • squid: mgr/cephadm: make ssh keepalive settings configurable (pr#59710, Adam King)

  • squid: mgr/cephadm: redeploy when some dependency daemon is add/removed (pr#58383, Redouane Kachach)

  • squid: mgr/cephadm: Update multi-site configs before deploying daemons on rgw service create (pr#60321, Aashish Sharma)

  • squid: mgr/cephadm: use host address while updating rgw zone endpoints (pr#59948, Aashish Sharma)

  • squid: mgr/client: validate connection before sending (pr#58887, NitzanMordhai)

  • squid: mgr/dashboard: add cephfs rename REST API (pr#60620, Yite Gu)

  • squid: mgr/dashboard: Add group field in nvmeof service form (pr#59446, Afreen Misbah)

  • squid: mgr/dashboard: add gw_groups support to nvmeof api (pr#59751, Nizamudeen A)

  • squid: mgr/dashboard: add gw_groups to all nvmeof endpoints (pr#60310, Nizamudeen A)

  • squid: mgr/dashboard: add restful api for creating crush rule with type of ‘erasure’ (pr#59139, sunlan)

  • squid: mgr/dashboard: Changes for Sign out text to Login out (pr#58988, Prachi Goel)

  • Squid: mgr/dashboard: Cloning subvolume not listing _nogroup if no subvolume (pr#59951, Dnyaneshwari talwekar)

  • squid: mgr/dashboard: custom image for kcli bootstrap script (pr#59879, Pedro Gonzalez Gomez)

  • squid: mgr/dashboard: Dashboard not showing Object/Overview correctly (pr#59038, Aashish Sharma)

  • squid: mgr/dashboard: Fix adding listener and null issue for groups (pr#60078, Afreen Misbah)

  • squid: mgr/dashboard: fix bucket get for s3 account owned bucket (pr#60466, Nizamudeen A)

  • squid: mgr/dashboard: fix ceph-users api doc (pr#59140, Nizamudeen A)

  • squid: mgr/dashboard: fix doc links in rgw-multisite (pr#60154, Pedro Gonzalez Gomez)

  • squid: mgr/dashboard: fix gateways section error:”404 - Not Found RGW Daemon not found: None” (pr#60231, Aashish Sharma)

  • squid: mgr/dashboard: fix group name bugs in the nvmeof API (pr#60348, Nizamudeen A)

  • squid: mgr/dashboard: fix handling NaN values in dashboard charts (pr#59961, Aashish Sharma)

  • squid: mgr/dashboard: fix lifecycle issues (pr#60378, Pedro Gonzalez Gomez)

  • squid: mgr/dashboard: Fix listener deletion (pr#60292, Afreen Misbah)

  • squid: mgr/dashboard: fix setting compression type while editing rgw zone (pr#59970, Aashish Sharma)

  • Squid: mgr/dashboard: Forbid snapshot name “.” and any containing “/” (pr#59995, Dnyaneshwari Talwekar)

  • squid: mgr/dashboard: handle infinite values for pools (pr#61096, Afreen)

  • squid: mgr/dashboard: ignore exceptions raised when no cert/key found (pr#60311, Nizamudeen A)

  • squid: mgr/dashboard: Increase maximum namespace count to 1024 (pr#59717, Afreen Misbah)

  • squid: mgr/dashboard: introduce server side pagination for osds (pr#60294, Nizamudeen A)

  • squid: mgr/dashboard: mgr/dashboard: Select no device by default in EC profile (pr#59811, Afreen Misbah)

  • Squid: mgr/dashboard: multisite sync policy improvements (pr#59965, Naman Munet)

  • Squid: mgr/dashboard: NFS Export form fixes (pr#59900, Dnyaneshwari Talwekar)

  • squid: mgr/dashboard: Nvme mTLS support and service name changes (pr#59819, Afreen Misbah)

  • squid: mgr/dashboard: provide option to enable pool based mirroring mode while creating a pool (pr#58638, Aashish Sharma)

  • squid: mgr/dashboard: remove cherrypy_backports.py (pr#60632, Nizamudeen A)

  • Squid: mgr/dashboard: remove orch required decorator from host UI router (list) (pr#59851, Naman Munet)

  • squid: mgr/dashboard: Rephrase dedicated pool helper in rbd create form (pr#59721, Aashish Sharma)

  • Squid: mgr/dashboard: RGW multisite sync remove zones fix (pr#59825, Naman Munet)

  • squid: mgr/dashboard: rm nvmeof conf based on its daemon name (pr#60604, Nizamudeen A)

  • Squid: mgr/dashboard: service form hosts selection only show up to 10 entries (pr#59760, Naman Munet)

  • squid: mgr/dashboard: show non default realm sync status in rgw overview page (pr#60232, Aashish Sharma)

  • squid: mgr/dashboard: Show which daemons failed in CEPHADM_FAILED_DAEMON healthcheck (pr#59597, Aashish Sharma)

  • Squid: mgr/dashboard: sync policy’s in Object >> Multi-site >> Sync-policy, does not show the zonegroup to which policy belongs to (pr#60346, Naman Munet)

  • Squid: mgr/dashboard: The subvolumes are missing from the dropdown menu on the “Create NFS export” page (pr#60356, Dnyaneshwari Talwekar)

  • Squid: mgr/dashboard: unable to edit pipe config for bucket level policy of bucket (pr#60293, Naman Munet)

  • squid: mgr/dashboard: Update nvmeof microcopies (pr#59718, Afreen Misbah)

  • squid: mgr/dashboard: update period after migrating to multi-site (pr#59964, Aashish Sharma)

  • squid: mgr/dashboard: update translations for squid (pr#60367, Nizamudeen A)

  • squid: mgr/dashboard: use grafana server instead of grafana-server in grafana 10.4.0 (pr#59722, Aashish Sharma)

  • Squid: mgr/dashboard: Wrong(half) uid is observed in dashboard when user created via cli contains $ in its name (pr#59693, Dnyaneshwari Talwekar)

  • squid: mgr/dashboard: Zone details showing incorrect data for data pool values and compression info for Storage Classes (pr#59596, Aashish Sharma)

  • Squid: mgr/dashboard: zonegroup level policy created at master zone did not sync to non-master zone (pr#59892, Naman Munet)

  • squid: mgr/nfs: generate user_id & access_key for apply_export(CephFS) (pr#59896, Avan Thakkar, avanthakkar, John Mulligan)

  • squid: mgr/orchestrator: fix encrypted flag handling in orch daemon add osd (pr#59473, Yonatan Zaken)

  • squid: mgr/rest: Trim requests array and limit size (pr#59372, Nitzan Mordechai)

  • squid: mgr/rgw: Adding a retry config while calling zone_create() (pr#59138, Kritik Sachdeva)

  • squid: mgr/rgwam: use realm/zonegroup/zone method arguments for period update (pr#59945, Aashish Sharma)

  • squid: mgr/volumes: add earmarking for subvol (pr#59894, Avan Thakkar)

  • squid: Modify container/ software to support release containers and the promotion of prerelease containers (pr#60962, Dan Mick)

  • squid: mon/ElectionLogic: tie-breaker mon ignore proposal from marked down mon (pr#58669, Kamoltat)

  • squid: mon/MonClient: handle ms_handle_fast_authentication return (pr#59306, Patrick Donnelly)

  • squid: mon/OSDMonitor: Add force-remove-snap mon command (pr#59402, Matan Breizman)

  • squid: mon/OSDMonitor: fix get_min_last_epoch_clean() (pr#55865, Matan Breizman)

  • squid: mon: Remove any pg_upmap_primary mapping during remove a pool (pr#58914, Mohit Agrawal)

  • squid: msg: insert PriorityDispatchers in sorted position (pr#58991, Casey Bodley)

  • squid: node-proxy: fix a regression when processing the RedFish API (pr#59997, Guillaume Abrioux)

  • squid: node-proxy: make the daemon discover endpoints (pr#58482, Guillaume Abrioux)

  • squid: objclass: deprecate cls_cxx_gather (pr#57819, Nitzan Mordechai)

  • squid: orch: disk replacement enhancement (pr#60486, Guillaume Abrioux)

  • squid: orch: refactor boolean handling in drive group spec (pr#59863, Guillaume Abrioux)

  • squid: os/bluestore: enable async manual compactions (pr#58740, Igor Fedotov)

  • squid: os/bluestore: Fix BlueFS allocating bdev label reserved location (pr#59969, Adam Kupczyk)

  • squid: os/bluestore: Fix ceph-bluestore-tool allocmap command (pr#60335, Adam Kupczyk)

  • squid: os/bluestore: Fix repair of multilabel when collides with BlueFS (pr#60336, Adam Kupczyk)

  • squid: os/bluestore: Improve documentation introduced by #57722 (pr#60893, Anthony D’Atri)

  • squid: os/bluestore: Multiple bdev labels on main block device (pr#59106, Adam Kupczyk)

  • squid: os/bluestore: Mute warnings (pr#59217, Adam Kupczyk)

  • squid: os/bluestore: Warning added for slow operations and stalled read (pr#59464, Md Mahamudur Rahaman Sajib)

  • squid: osd/scheduler: add mclock queue length perfcounter (pr#59035, zhangjianwei2)

  • squid: osd/scrub: decrease default deep scrub chunk size (pr#59791, Ronen Friedman)

  • squid: osd/scrub: exempt only operator scrubs from max_scrubs limit (pr#59020, Ronen Friedman)

  • squid: osd/scrub: reduce osd_requested_scrub_priority default value (pr#59885, Ronen Friedman)

  • squid: osd: fix require_min_compat_client handling for msr rules (pr#59492, Samuel Just, Radoslaw Zarzynski)

  • squid: PeeringState.cc: Only populate want_acting when num_osds < bucket_max (pr#59083, Kamoltat)

  • squid: qa/cephadm: extend iscsi teuth test (pr#59934, Adam King)

  • squid: qa/cephfs: fix TestRenameCommand and unmount the clinet before failin… (pr#59398, Xiubo Li)

  • squid: qa/cephfs: ignore variant of MDS_UP_LESS_THAN_MAX (pr#58788, Patrick Donnelly)

  • squid: qa/distros: reinstall nvme-cli on centos 9 nodes (pr#59471, Adam King)

  • squid: qa/rgw/multisite: specify realm/zonegroup/zone args for ‘account create’ (pr#59603, Casey Bodley)

  • squid: qa/rgw: bump keystone/barbican from 2023.1 to 2024.1 (pr#61023, Casey Bodley)

  • squid: qa/rgw: fix s3 java tests by forcing gradle to run on Java 8 (pr#61053, J. Eric Ivancich)

  • squid: qa/rgw: force Hadoop to run under Java 1.8 (pr#61120, J. Eric Ivancich)

  • squid: qa/rgw: pull Apache artifacts from mirror instead of archive.apache.org (pr#61101, J. Eric Ivancich)

  • squid: qa/standalone/scrub: fix the searched-for text for snaps decode errors (pr#58967, Ronen Friedman)

  • squid: qa/standalone/scrub: increase status updates frequency (pr#59974, Ronen Friedman)

  • squid: qa/standalone/scrub: remove TEST_recovery_scrub_2 (pr#60287, Ronen Friedman)

  • squid: qa/suites/crimson-rados/perf: add ssh keys (pr#61109, Nitzan Mordechai)

  • squid: qa/suites/rados/thrash-old-clients: Add noscrub, nodeep-scrub to ignorelist (pr#58629, Kamoltat)

  • squid: qa/suites/rados/thrash-old-clients: test with N-2 releases on centos 9 (pr#58607, Laura Flores)

  • squid: qa/suites/rados/verify/validater: increase heartbeat grace timeout (pr#58785, Sridhar Seshasayee)

  • squid: qa/suites/rados: Cancel injectfull to allow cleanup (pr#59156, Brad Hubbard)

  • squid: qa/suites/rbd/iscsi: enable all supported container hosts (pr#60089, Ilya Dryomov)

  • squid: qa/suites: drop --show-reachable=yes from fs:valgrind tests (pr#59068, Jos Collin)

  • squid: qa/task: update alertmanager endpoints version (pr#59930, Nizamudeen A)

  • squid: qa/tasks/mgr/test_progress.py: deal with pre-exisiting pool (pr#58263, Kamoltat)

  • squid: qa/tasks/nvme_loop: update task to work with new nvme list format (pr#61026, Adam King)

  • squid: qa/upgrade: fix checks to make sure upgrade is still in progress (pr#59472, Adam King)

  • squid: qa: adjust expected io_opt in krbd_discard_granularity.t (pr#59232, Ilya Dryomov)

  • squid: qa: ignore container checkpoint/restore related selinux denials for c… (issue#66640, issue#67117, pr#58808, Venky Shankar)

  • squid: qa: load all dirfrags before testing altname recovery (pr#59521, Patrick Donnelly)

  • squid: qa: remove all bluestore signatures on devices (pr#60021, Guillaume Abrioux)

  • squid: qa: suppress __trans_list_add valgrind warning (pr#58790, Patrick Donnelly)

  • squid: RADOS: Generalize stretch mode pg temp handling to be usable without stretch mode (pr#59084, Kamoltat)

  • squid: rbd-mirror: use correct ioctx for namespace (pr#59771, N Balachandran)

  • squid: rbd: “rbd bench” always writes the same byte (pr#59502, Ilya Dryomov)

  • squid: rbd: amend “rbd {group,} rename” and “rbd mirror pool” command descriptions (pr#59602, Ilya Dryomov)

  • squid: rbd: handle --{group,image}-namespace in “rbd group image {add,rm}” (pr#61172, Ilya Dryomov)

  • squid: rgw/beast: optimize for accept when meeting error in listenning (pr#60244, Mingyuan Liang, Casey Bodley)

  • squid: rgw/http: finish_request() after logging errors (pr#59439, Casey Bodley)

  • squid: rgw/kafka: refactor topic creation to avoid rd_kafka_topic_name() (pr#59754, Yuval Lifshitz)

  • squid: rgw/lc: Fix lifecycle not working while bucket versioning is suspended (pr#61138, Trang Tran)

  • squid: rgw/multipart: use cls_version to avoid racing between part upload and multipart complete (pr#59678, Jane Zhu)

  • squid: rgw/multisite: metadata polling event based on unmodified mdlog_marker (pr#60792, Shilpa Jagannath)

  • squid: rgw/notifications: fixing radosgw-admin notification json (pr#59302, Yuval Lifshitz)

  • squid: rgw/notifications: free completion pointer using unique_ptr (pr#59671, Yuval Lifshitz)

  • squid: rgw/notify: visit() returns copy of owner string (pr#59226, Casey Bodley)

  • squid: rgw/rados: don’t rely on IoCtx::get_last_version() for async ops (pr#60065, Casey Bodley)

  • squid: rgw: add s3select usage to log usage (pr#59120, Seena Fallah)

  • squid: rgw: decrement qlen/qactive perf counters on error (pr#59670, Mark Kogan)

  • squid: rgw: decrypt multipart get part when encrypted (pr#60130, sungjoon-koh)

  • squid: rgw: ignore zoneless default realm when not configured (pr#59445, Casey Bodley)

  • squid: rgw: load copy source bucket attrs in putobj (pr#59413, Seena Fallah)

  • squid: rgw: optimize bucket listing to skip past regions of namespaced entries (pr#61070, J. Eric Ivancich)

  • squid: rgw: revert account-related changes to get_iam_policy_from_attr() (pr#59221, Casey Bodley)

  • squid: rgw: RGWAccessKey::decode_json() preserves default value of ‘active’ (pr#60823, Casey Bodley)

  • squid: rgw: switch back to boost::asio for spawn() and yield_context (pr#60133, Casey Bodley)

  • squid: rgwlc: fix typo in getlc (ObjectSizeGreaterThan) (pr#59223, Matt Benjamin)

  • squid: RGW|BN: fix lifecycle test issue (pr#59010, Ali Masarwa)

  • squid: RGW|Bucket notification: fix for v2 topics rgw-admin list operation (pr#60774, Oshrey Avraham, Ali Masarwa)

  • squid: seastar: update submodule (pr#58955, Matan Breizman)

  • squid: src/ceph_release, doc: mark squid stable (pr#59537, Neha Ojha)

  • squid: src/crimson/osd/scrub: fix the null pointer error (pr#58885, junxiang Mu)

  • squid: src/mon/ConnectionTracker.cc: Fix dump function (pr#60003, Kamoltat)

  • squid: suites/upgrade/quincy-x: update the ignore list (pr#59624, Nitzan Mordechai)

  • squid: suites: adding ignore list for stray daemon (pr#58267, Nitzan Mordechai)

  • squid: suites: test should ignore osd_down warnings (pr#59147, Nitzan Mordechai)

  • squid: test/neorados: remove depreciated RemoteReads cls test (pr#58144, Laura Flores)

  • squid: test/rgw/notification: fixing backport issues in the tests (pr#60545, Yuval Lifshitz)

  • squid: test/rgw/notification: use real ip address instead of localhost (pr#59303, Yuval Lifshitz)

  • squid: test/rgw/notifications: don’t check for full queue if topics expired (pr#59917, Yuval Lifshitz)

  • squid: test/rgw/notifications: fix test regression (pr#61119, Yuval Lifshitz)

  • squid: Test: osd-recovery-space.sh extends the wait time for “recovery toofull” (pr#59041, Nitzan Mordechai)

  • upgrade/cephfs/mds_upgrade_sequence: ignore osds down (pr#59865, Kamoltat Sirivadhna)

  • squid: rgw: Don’t crash on exceptions from pool listing (pr#61306, Adam Emerson)

  • squid: container/Containerfile: replace CEPH_VERSION label for backward compact (pr#61583, Dan Mick)

  • squid: container/build.sh: fix up org vs. repo naming (pr#61584, Dan Mick)

  • squid: container/build.sh: don’t require repo creds on NO_PUSH (pr#61585, Dan Mick)

v19.2.0 Squid

Attention

iSCSI users are advised that the upstream developers of Ceph encountered a bug during an upgrade from Ceph 19.1.1 to Ceph 19.2.0. Read Tracker Issue 68215 before attempting an upgrade to 19.2.0.

Some users have encountered a Ceph Manager balancer module issue when upgrading to Ceph 19.2.0. If you encounter this issue, disable the balancer by running the command ceph balancer off and the cluster will operate as expected. A fix has been implemented in 19.2.1, please read Tracker Issue 68657 before attempting an upgrade.

Highlights

RADOS

  • BlueStore has been optimized for better performance in snapshot-intensive workloads.

  • BlueStore RocksDB LZ4 compression is now enabled by default to improve average performance and “fast device” space usage.

  • Other improvements include more flexible EC configurations, an OpTracker to help debug mgr module issues, and better scrub scheduling.

Dashboard

  • Improved navigation layout

  • Support for managing CephFS snapshots and clones, as well as snapshot schedule management

  • Manage authorization capabilities for CephFS resources

  • Helpers on mounting a CephFS volume

RBD

  • diff-iterate can now execute locally, bringing a dramatic performance improvement for QEMU live disk synchronization and backup use cases.

  • Support for cloning from non-user type snapshots is added.

  • rbd-wnbd driver has gained the ability to multiplex image mappings.

RGW

  • The User Accounts feature unlocks several new AWS-compatible IAM APIs for the self-service management of users, keys, groups, roles, policy and more.

Crimson/Seastore

Ceph

  • ceph: a new --daemon-output-file switch is available for ceph tell commands to dump output to a file local to the daemon. For commands which produce large amounts of output, this avoids a potential spike in memory usage on the daemon, allows for faster streaming writes to a file local to the daemon, and reduces time holding any locks required to execute the command. For analysis, it is necessary to manually retrieve the file from the host running the daemon. Currently, only --format=json|json-pretty are supported.

  • cls_cxx_gather is marked as deprecated.

  • Tracing: The blkin tracing feature (see https://docs.ceph.com/en/reef/dev/blkin/) is now deprecated in favor of Opentracing (https://docs.ceph.com/en/reef/dev/developer_guide/jaegertracing/) and will be removed in a later release.

  • PG dump: The default output of ceph pg dump --format json has changed. The default JSON format produces a rather massive output in large clusters and isn’t scalable, so we have removed the ‘network_ping_times’ section from the output. Details in the tracker: https://tracker.ceph.com/issues/57460

CephFS

  • CephFS: it is now possible to pause write I/O and metadata mutations on a tree in the file system using a new suite of subvolume quiesce commands. This is implemented to support crash-consistent snapshots for distributed applications. Please see the relevant section in the documentation on CephFS subvolumes for more information.

  • CephFS: MDS evicts clients which are not advancing their request tids which causes a large buildup of session metadata resulting in the MDS going read-only due to the RADOS operation exceeding the size threshold. mds_session_metadata_threshold config controls the maximum size that a (encoded) session metadata can grow.

  • CephFS: A new “mds last-seen” command is available for querying the last time an MDS was in the FSMap, subject to a pruning threshold.

  • CephFS: For clusters with multiple CephFS file systems, all the snap-schedule commands now expect the ‘--fs’ argument.

  • CephFS: The period specifier m now implies minutes and the period specifier M now implies months. This has been made consistent with the rest of the system.

  • CephFS: Running the command “ceph fs authorize” for an existing entity now upgrades the entity’s capabilities instead of printing an error. It can now also change read/write permissions in a capability that the entity already holds. If the capability passed by user is same as one of the capabilities that the entity already holds, idempotency is maintained.

  • CephFS: Two FS names can now be swapped, optionally along with their IDs, using “ceph fs swap” command. The function of this API is to facilitate file system swaps for disaster recovery. In particular, it avoids situations where a named file system is temporarily missing which would prompt a higher level storage operator (like Rook) to recreate the missing file system. See https://docs.ceph.com/en/latest/cephfs/administration/#file-systems docs for more information.

  • CephFS: Before running the command “ceph fs rename”, the filesystem to be renamed must be offline and the config “refuse_client_session” must be set for it. The config “refuse_client_session” can be removed/unset and filesystem can be online after the rename operation is complete.

  • CephFS: Disallow delegating preallocated inode ranges to clients. Config mds_client_delegate_inos_pct defaults to 0 which disables async dirops in the kclient.

  • CephFS: MDS log trimming is now driven by a separate thread which tries to trim the log every second (mds_log_trim_upkeep_interval config). Also, a couple of configs govern how much time the MDS spends in trimming its logs. These configs are mds_log_trim_threshold and mds_log_trim_decay_rate.

  • CephFS: Full support for subvolumes and subvolume groups is now available

  • CephFS: The subvolume snapshot clone command now depends on the config option snapshot_clone_no_wait which is used to reject the clone operation when all the cloner threads are busy. This config option is enabled by default which means that if no cloner threads are free, the clone request errors out with EAGAIN. The value of the config option can be fetched by using: ceph config get mgr mgr/volumes/snapshot_clone_no_wait and it can be disabled by using: ceph config set mgr mgr/volumes/snapshot_clone_no_wait false for snap_schedule Manager module.

  • CephFS: Commands ceph mds fail and ceph fs fail now require a confirmation flag when some MDSs exhibit health warning MDS_TRIM or MDS_CACHE_OVERSIZED. This is to prevent accidental MDS failover causing further delays in recovery.

  • CephFS: fixes to the implementation of the root_squash mechanism enabled via cephx mds caps on a client credential require a new client feature bit, client_mds_auth_caps. Clients using credentials with root_squash without this feature will trigger the MDS to raise a HEALTH_ERR on the cluster, MDS_CLIENTS_BROKEN_ROOTSQUASH. See the documentation on this warning and the new feature bit for more information.

  • CephFS: Expanded removexattr support for cephfs virtual extended attributes. Previously one had to use setxattr to restore the default in order to “remove”. You may now properly use removexattr to remove. You can also now remove layout on root inode, which then will restore layout to default layout.

  • CephFS: cephfs-journal-tool is guarded against running on an online file system. The ‘cephfs-journal-tool --rank <fs_name>:<mds_rank> journal reset’ and ‘cephfs-journal-tool --rank <fs_name>:<mds_rank> journal reset --force’ commands require ‘--yes-i-really-really-mean-it’.

  • CephFS: “ceph fs clone status” command will now print statistics about clone progress in terms of how much data has been cloned (in both percentage as well as bytes) and how many files have been cloned.

  • CephFS: “ceph status” command will now print a progress bar when cloning is ongoing. If clone jobs are more than the cloner threads, it will print one more progress bar that shows total amount of progress made by both ongoing as well as pending clones. Both progress are accompanied by messages that show number of clone jobs in the respective categories and the amount of progress made by each of them.

  • cephfs-shell: The cephfs-shell utility is now packaged for RHEL 9 / CentOS 9 as required python dependencies are now available in EPEL9.

  • The CephFS automatic metadata load (sometimes called “default”) balancer is now disabled by default. The new file system flag balance_automate can be used to toggle it on or off. It can be enabled or disabled via ceph fs set <fs_name> balance_automate <bool>.

CephX

  • cephx: key rotation is now possible using ceph auth rotate. Previously, this was only possible by deleting and then recreating the key.

Dashboard

  • Dashboard: Rearranged Navigation Layout: The navigation layout has been reorganized for improved usability and easier access to key features.

  • Dashboard: CephFS Improvments * Support for managing CephFS snapshots and clones, as well as snapshot schedule management * Manage authorization capabilities for CephFS resources * Helpers on mounting a CephFS volume

  • Dashboard: RGW Improvements * Support for managing bucket policies * Add/Remove bucket tags * ACL Management * Several UI/UX Improvements to the bucket form

MGR

  • MGR/REST: The REST manager module will trim requests based on the ‘max_requests’ option. Without this feature, and in the absence of manual deletion of old requests, the accumulation of requests in the array can lead to Out Of Memory (OOM) issues, resulting in the Manager crashing.

  • MGR: An OpTracker to help debug mgr module issues is now available.

Monitoring

  • Monitoring: Grafana dashboards are now loaded into the container at runtime rather than building a grafana image with the grafana dashboards. Official Ceph grafana images can be found in quay.io/ceph/grafana

  • Monitoring: RGW S3 Analytics: A new Grafana dashboard is now available, enabling you to visualize per bucket and user analytics data, including total GETs, PUTs, Deletes, Copies, and list metrics.

  • The mon_cluster_log_file_level and mon_cluster_log_to_syslog_level options have been removed. Henceforth, users should use the new generic option mon_cluster_log_level to control the cluster log level verbosity for the cluster log file as well as for all external entities.

RADOS

  • RADOS: A POOL_APP_NOT_ENABLED health warning will now be reported if the application is not enabled for the pool irrespective of whether the pool is in use or not. Always tag a pool with an application using ceph osd pool application enable command to avoid reporting of POOL_APP_NOT_ENABLED health warning for that pool. The user might temporarily mute this warning using ceph health mute POOL_APP_NOT_ENABLED.

  • RADOS: get_pool_is_selfmanaged_snaps_mode C++ API has been deprecated due to being prone to false negative results. Its safer replacement is pool_is_in_selfmanaged_snaps_mode.

  • RADOS: For bug 62338 (https://tracker.ceph.com/issues/62338), we did not choose to condition the fix on a server flag in order to simplify backporting. As a result, in rare cases it may be possible for a PG to flip between two acting sets while an upgrade to a version with the fix is in progress. If you observe this behavior, you should be able to work around it by completing the upgrade or by disabling async recovery by setting osd_async_recovery_min_cost to a very large value on all OSDs until the upgrade is complete: ceph config set osd osd_async_recovery_min_cost 1099511627776

  • RADOS: A detailed version of the balancer status CLI command in the balancer module is now available. Users may run ceph balancer status detail to see more details about which PGs were updated in the balancer’s last optimization. See https://docs.ceph.com/en/latest/rados/operations/balancer/ for more information.

  • RADOS: Read balancing may now be managed automatically via the balancer manager module. Users may choose between two new modes: upmap-read, which offers upmap and read optimization simultaneously, or read, which may be used to only optimize reads. For more detailed information see https://docs.ceph.com/en/latest/rados/operations/read-balancer/#online-optimization.

  • RADOS: BlueStore has been optimized for better performance in snapshot-intensive workloads.

  • RADOS: BlueStore RocksDB LZ4 compression is now enabled by default to improve average performance and “fast device” space usage.

  • RADOS: A new CRUSH rule type, MSR (Multi-Step Retry), allows for more flexible EC configurations.

  • RADOS: Scrub scheduling behavior has been improved.

Crimson/Seastore

RBD

  • RBD: When diffing against the beginning of time (fromsnapname == NULL) in fast-diff mode (whole_object == true with fast-diff image feature enabled and valid), diff-iterate is now guaranteed to execute locally if exclusive lock is available. This brings a dramatic performance improvement for QEMU live disk synchronization and backup use cases.

  • RBD: The try-netlink mapping option for rbd-nbd has become the default and is now deprecated. If the NBD netlink interface is not supported by the kernel, then the mapping is retried using the legacy ioctl interface.

  • RBD: The option --image-id has been added to rbd children CLI command, so it can be run for images in the trash.

  • RBD: Image::access_timestamp and Image::modify_timestamp Python APIs now return timestamps in UTC.

  • RBD: Support for cloning from non-user type snapshots is added. This is intended primarily as a building block for cloning new groups from group snapshots created with rbd group snap create command, but has also been exposed via the new --snap-id option for rbd clone command.

  • RBD: The output of rbd snap ls --all command now includes the original type for trashed snapshots.

  • RBD: RBD_IMAGE_OPTION_CLONE_FORMAT option has been exposed in Python bindings via clone_format optional parameter to clone, deep_copy and migration_prepare methods.

  • RBD: RBD_IMAGE_OPTION_FLATTEN option has been exposed in Python bindings via flatten optional parameter to deep_copy and migration_prepare methods.

  • RBD: rbd-wnbd driver has gained the ability to multiplex image mappings. Previously, each image mapping spawned its own rbd-wnbd daemon, which lead to an excessive amount of TCP sessions and other resources being consumed, eventually exceeding Windows limits. With this change, a single rbd-wnbd daemon is spawned per host and most OS resources are shared between image mappings. Additionally, ceph-rbd service starts much faster.

RGW

  • RGW: GetObject and HeadObject requests now return a x-rgw-replicated-at header for replicated objects. This timestamp can be compared against the Last-Modified header to determine how long the object took to replicate.

  • RGW: S3 multipart uploads using Server-Side Encryption now replicate correctly in multi-site. Previously, the replicas of such objects were corrupted on decryption. A new tool, radosgw-admin bucket resync encrypted multipart, can be used to identify these original multipart uploads. The LastModified timestamp of any identified object is incremented by 1ns to cause peer zones to replicate it again. For multi-site deployments that make any use of Server-Side Encryption, we recommended running this command against every bucket in every zone after all zones have upgraded.

  • RGW: Introducing a new data layout for the Topic metadata associated with S3 Bucket Notifications, where each Topic is stored as a separate RADOS object and the bucket notification configuration is stored in a bucket attribute. This new representation supports multisite replication via metadata sync and can scale to many topics. This is on by default for new deployments, but is not enabled by default on upgrade. Once all radosgws have upgraded (on all zones in a multisite configuration), the notification_v2 zone feature can be enabled to migrate to the new format. See https://docs.ceph.com/en/squid/radosgw/zone-features for details. The “v1” format is now considered deprecated and may be removed after 2 major releases.

  • RGW: New tools have been added to radosgw-admin for identifying and correcting issues with versioned bucket indexes. Historical bugs with the versioned bucket index transaction workflow made it possible for the index to accumulate extraneous “book-keeping” olh entries and plain placeholder entries. In some specific scenarios where clients made concurrent requests referencing the same object key, it was likely that a lot of extra index entries would accumulate. When a significant number of these entries are present in a single bucket index shard, they can cause high bucket listing latencies and lifecycle processing failures. To check whether a versioned bucket has unnecessary olh entries, users can now run radosgw-admin bucket check olh. If the --fix flag is used, the extra entries will be safely removed. A distinct issue from the one described thus far, it is also possible that some versioned buckets are maintaining extra unlinked objects that are not listable from the S3/ Swift APIs. These extra objects are typically a result of PUT requests that exited abnormally, in the middle of a bucket index transaction - so the client would not have received a successful response. Bugs in prior releases made these unlinked objects easy to reproduce with any PUT request that was made on a bucket that was actively resharding. Besides the extra space that these hidden, unlinked objects consume, there can be another side effect in certain scenarios, caused by the nature of the failure mode that produced them, where a client of a bucket that was a victim of this bug may find the object associated with the key to be in an inconsistent state. To check whether a versioned bucket has unlinked entries, users can now run radosgw-admin bucket check unlinked. If the --fix flag is used, the unlinked objects will be safely removed. Finally, a third issue made it possible for versioned bucket index stats to be accounted inaccurately. The tooling for recalculating versioned bucket stats also had a bug, and was not previously capable of fixing these inaccuracies. This release resolves those issues and users can now expect that the existing radosgw-admin bucket check command will produce correct results. We recommend that users with versioned buckets, especially those that existed on prior releases, use these new tools to check whether their buckets are affected and to clean them up accordingly.

  • RGW: The User Accounts feature unlocks several new AWS-compatible IAM APIs for the self-service management of users, keys, groups, roles, policy and more. Existing users can be adopted into new accounts. This process is optional but irreversible. See https://docs.ceph.com/en/squid/radosgw/account and https://docs.ceph.com/en/squid/radosgw/iam for details.

  • RGW: On startup, radosgw and radosgw-admin now validate the rgw_realm config option. Previously, they would ignore invalid or missing realms and go on to load a zone/zonegroup in a different realm. If startup fails with a “failed to load realm” error, fix or remove the rgw_realm option.

  • RGW: The radosgw-admin commands realm create and realm pull no longer set the default realm without --default.

  • RGW: Fixed an S3 Object Lock bug with PutObjectRetention requests that specify a RetainUntilDate after the year 2106. This date was truncated to 32 bits when stored, so a much earlier date was used for object lock enforcement. This does not effect PutBucketObjectLockConfiguration where a duration is given in Days. The RetainUntilDate encoding is fixed for new PutObjectRetention requests, but cannot repair the dates of existing object locks. Such objects can be identified with a HeadObject request based on the x-amz-object-lock-retain-until-date response header.

  • S3 Get/HeadObject now supports the query parameter partNumber to read a specific part of a completed multipart upload.

  • RGW: The SNS CreateTopic API now enforces the same topic naming requirements as AWS: Topic names must be made up of only uppercase and lowercase ASCII letters, numbers, underscores, and hyphens, and must be between 1 and 256 characters long.

  • RGW: Notification topics are now owned by the user that created them. By default, only the owner can read/write their topics. Topic policy documents are now supported to grant these permissions to other users. Preexisting topics are treated as if they have no owner, and any user can read/write them using the SNS API. If such a topic is recreated with CreateTopic, the issuing user becomes the new owner. For backward compatibility, all users still have permission to publish bucket notifications to topics owned by other users. A new configuration parameter, rgw_topic_require_publish_policy, can be enabled to deny sns:Publish permissions unless explicitly granted by topic policy.

  • RGW: Fix issue with persistent notifications where the changes to topic param that were modified while persistent notifications were in the queue will be reflected in notifications. So if the user sets up topic with incorrect config (password/ssl) causing failure while delivering the notifications to broker, can now modify the incorrect topic attribute and on retry attempt to delivery the notifications, new configs will be used.

  • RGW: in bucket notifications, the principalId inside ownerIdentity now contains the complete user ID, prefixed with the tenant ID.

Telemetry

  • The basic channel in telemetry now captures pool flags that allows us to better understand feature adoption, such as Crimson. To opt in to telemetry, run ceph telemetry on.

Upgrading from Quincy or Reef

Before starting, make sure your cluster is stable and healthy (no down or recovering OSDs). (This is optional, but recommended.) You can disable the autoscaler for all pools during the upgrade using the noautoscale flag.

Note

You can monitor the progress of your upgrade at each stage with the ceph versions command, which will tell you what ceph version(s) are running for each type of daemon.

Upgrading cephadm clusters

If your cluster is deployed with cephadm (first introduced in Octopus), then the upgrade process is entirely automated. To initiate the upgrade,

ceph orch upgrade start --image quay.io/ceph/ceph:v19.2.0

The same process is used to upgrade to future minor releases.

Upgrade progress can be monitored with

ceph orch upgrade status

Upgrade progress can also be monitored with ceph -s (which provides a simple progress bar) or more verbosely with

ceph -W cephadm

The upgrade can be paused or resumed with

ceph orch upgrade pause  # to pause
ceph orch upgrade resume # to resume

or canceled with

ceph orch upgrade stop

Note that canceling the upgrade simply stops the process; there is no ability to downgrade back to Quincy or Reef.

Upgrading non-cephadm clusters

Note

  1. If your cluster is running Quincy (17.2.x) or later, you might choose to first convert it to use cephadm so that the upgrade to Squid is automated (see above). For more information, see https://docs.ceph.com/en/squid/cephadm/adoption/.

  2. If your cluster is running Quincy (17.2.x) or later, systemd unit file names have changed to include the cluster fsid. To find the correct systemd unit file name for your cluster, run following command:

    systemctl -l | grep <daemon type>

    Example:

    systemctl -l | grep mon | grep active

    ceph-6ce0347c-314a-11ee-9b52-000af7995d6c@mon.f28-h21-000-r630.service                                           loaded active running   Ceph mon.f28-h21-000-r630 for 6ce0347c-314a-11ee-9b52-000af7995d6c

  1. Set the noout flag for the duration of the upgrade. (Optional, but recommended.)

    ceph osd set noout

  2. Upgrade monitors by installing the new packages and restarting the monitor daemons. For example, on each monitor host

    systemctl restart ceph-mon.target

    Once all monitors are up, verify that the monitor upgrade is complete by looking for the squid string in the mon map. The command

    ceph mon dump | grep min_mon_release

    should report:

    min_mon_release 19 (squid)

    If it does not, that implies that one or more monitors hasn’t been upgraded and restarted and/or the quorum does not include all monitors.

  3. Upgrade ceph-mgr daemons by installing the new packages and restarting all manager daemons. For example, on each manager host,

    systemctl restart ceph-mgr.target

    Verify the ceph-mgr daemons are running by checking ceph -s:

    ceph -s

    ...
  services:
   mon: 3 daemons, quorum foo,bar,baz
   mgr: foo(active), standbys: bar, baz
...

  4. Upgrade all OSDs by installing the new packages and restarting the ceph-osd daemons on all OSD hosts

    systemctl restart ceph-osd.target

  5. Upgrade all CephFS MDS daemons. For each CephFS file system,

    1. Disable standby_replay:

      ceph fs set <fs_name> allow_standby_replay false

    2. Reduce the number of ranks to 1. (Make note of the original number of MDS daemons first if you plan to restore it later.)

      ceph status # ceph fs set <fs_name> max_mds 1

    3. Wait for the cluster to deactivate any non-zero ranks by periodically checking the status

      ceph status

    4. Take all standby MDS daemons offline on the appropriate hosts with

      systemctl stop ceph-mds@<daemon_name>

    5. Confirm that only one MDS is online and is rank 0 for your FS

      ceph status

    6. Upgrade the last remaining MDS daemon by installing the new packages and restarting the daemon

      systemctl restart ceph-mds.target

    7. Restart all standby MDS daemons that were taken offline

      systemctl start ceph-mds.target

    8. Restore the original value of max_mds for the volume

      ceph fs set <fs_name> max_mds <original_max_mds>

  6. Upgrade all radosgw daemons by upgrading packages and restarting daemons on all hosts

    systemctl restart ceph-radosgw.target

  7. Complete the upgrade by disallowing pre-Squid OSDs and enabling all new Squid-only functionality

    ceph osd require-osd-release squid

  8. If you set noout at the beginning, be sure to clear it with

    ceph osd unset noout

  9. Consider transitioning your cluster to use the cephadm deployment and orchestration framework to simplify cluster management and future upgrades. For more information on converting an existing cluster to cephadm, see https://docs.ceph.com/en/squid/cephadm/adoption/.

Post-upgrade

  1. Verify the cluster is healthy with ceph health. If your cluster is running Filestore, and you are upgrading directly from Quincy to Squid, a deprecation warning is expected. This warning can be temporarily muted using the following command

    ceph health mute OSD_FILESTORE

  2. Consider enabling the telemetry module to send anonymized usage statistics and crash information to the Ceph upstream developers. To see what would be reported (without actually sending any information to anyone),

    ceph telemetry preview-all

    If you are comfortable with the data that is reported, you can opt-in to automatically report the high-level cluster metadata with

    ceph telemetry on

    The public dashboard that aggregates Ceph telemetry can be found at https://telemetry-public.ceph.com/.

Upgrading from pre-Quincy releases (like Pacific)

You must first upgrade to Quincy (17.2.z) or Reef (18.2.z) before upgrading to Squid.

Brought to you by the Ceph Foundation

The Ceph Documentation is a community resource funded and hosted by the non-profit Ceph Foundation. If you would like to support this and our other efforts, please consider joining now.